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Abstract 

We give a survey of a variety of recent results about the distribution 
and some geometric properties of points (x, y) on modular hyperbolas 
xy = a (mod m). We also outline a very diverse range of applica- 
tions of such results, discuss multivariate generalisations and suggest 
a number of open problems of different levels of difficulty. 



1 Introduction 

1.1 Modular Hyperbolas 

For a positive integer m and an arbitrary integer a with gcd(a,m) = 1, we 
consider the set of points (x, y) on the modular hyperbola 

7-La,m = {(x,y) ■ xy = a (mod m)}. 

We give a survey of various results about the distribution and some geometric 
properties of points on 'H a „m- We also briefly consider some multidimensional 
generalisations, which often require very different techniques. Several open 
problems are formulated as well. Our main goal is to show that although 
%a,m is defined by one of the simplest possible polynomial congruences, it 
exhibits many mysterious properties and very surprising links with a wide 
variety of classical number theoretic questions and beyond. 
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In this survey, we do not present complete proofs but rather explain their 
underlying ideas and specific ingredients. Typically the error terms in the 
asymptotic formulas we give contain a factor m 0<yl \ In most cases it can be 
replaced by a more explicit function. Furthermore, when m is prime it can 
usually (but not always) be replaced by just some low power of logm. 

There is a large number of papers in this area which rather routinely 
study seemingly distinct, but in fact closely related, problems about T-L ajTn on 
a case by case basis. Here, we explain some standard principles which can be 
used to derive these and many other results of similar spirit about the points 
on % a ,m as simple corollaries of just one general result about the uniformity 
of distribution of points on "H a ,m in certain domains. In Section 13.11 such 
a result is presented in Theorem [T3] and derived in a very straightforward 
fashion from bounds of Kloosterman sums (see ([I]) below) using some stan- 
dard arguments. Results of this type are quite standard and can be obtained 
for many other curves (at least in the case of prime modulus m, where the 
Bombieri bound (28] provides a readily available substitute for flTJ)). 

However, most of the other results on modular hyperbolas rely on some 
rather subtle number theoretic arguments which in general do not apply to 
other polynomial congruences. This places modular hyperbolas in a very 
special position and shows that they define a mathematically much richer 
structure than a "typical" polynomial congruence. 

1.2 Distribution of Points and Kloosterman Sums 

Since the distribution of points on H a , m is our primal object of study, we 
introduce the following definition. Given two sets of integers X and y, we 
write 

H a , m (X,y) = {(x, y ) e n a , m : x e y e y}. 

Since the case of a = 1 is of special interest we also write 

= ^i,mi an d n m {x, y) = Hi t m(x, y). 

Obtaining precise asymptotic formulas for and establishing the positivity 
of ij z %a,m{.X , y) for various "interesting" sets X and y have been the central 
themes of many works in this direction. Certainly the problem becomes 
harder and far more interesting when the sets X and 3^ become "thinner" . 

Let 

e m(z) = exp(2niz/m). 
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One immediately observes that the well-known bound 



K m (r,s)\ ^ (mgcd(r, s,m)) 



1/2+0(1) 



(1) 



of Kloosterman sums 



K m (r,s)= ^ e m (rx + sy), 



(2) 



see [1151 Corollary 11.12], can be used to study the points on % a)m - One 
only needs to recall some standard tools which link exponential sums with 
uniformity of distribution which we present in Section 12.31 

We remark that most of the results which rely only on (JT[) do not appeal 
to anything specific about the congruence xy = a (mod m), and at least 
when m prime they can be extended to the distribution of solutions to more 
general congruences f(x, y) = (mod m), with a polynomial / with integer 
coefficients. In the case of prime m, the Bombieri bound [28] of exponential 
sums along a curve replaces the bound ([I]). Although, as we have mentioned, 
we present such a generic result in Section [37T| our main purpose is to outline 
some more intricate arguments, which use special properties of the congru- 
ence xy = a (mod m) and cannot be generalised to other congruences. In 
particular, in Section 13.21 we discuss the behaviour of points on H aim on av- 
erage over a. We also describe some geometric properties of the set H a ,m m 
Sections I4.1H4.3| show that it cannot be too concentrated even in very small 
squares in Section 14.41 and discuss some arithmetic properties of elements of 
T-L a ,m in Section I4~5l 

Before presenting results about the properties of H a ,m, we give a short 
overview of the surprisingly diverse variety of number theoretic tools which 
have been used in the study of % a , m and their multivariate generalisations, 
see Sections 

Finally, we demonstrate the wealth and diversity of various applications of 
the results on the distribution of points on Ha,m- Some of these applications 
are quite natural with very transparent connections to % a ,m, see Section IBTTl 
However, there are also several less obvious and thus much more exciting 
applications, see Sections 15 .2115 .201 An especially striking example of such 
unexpected applications is given by a result of [148] on torsions of elliptic 
curves, see Section IS. Ill 
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1.3 Notation 



Throughout the paper, any implied constants in symbols O, <C and ^> may 
occasionally depend, where obvious, on the real positive parameter e and are 
absolute otherwise. We recall that the notations U = 0(V), U -C V and 
V 3> U are all equivalent to the statement that \U\ ^ cV holds with some 
constant c > 0. 

We use p, with or without a subscript, to denote a prime number and use 
m to denote a positive integer. 

We denote by Z/mZ the residue ring modulo m. Typically we assume that 
the set {0, . . . , m— 1} is used to represent the elements of Z/mZ. Accordingly, 
we often consider the following subset of % a ,m 

H a ,m = Ua,m l~l [0, 771 — l] 2 . 

We also put 

n m = n m n[o,m-i] 2 . 

We always follow the convention that arithmetic operations in the ar- 
guments of e m are performed modulo m. In particular, the Kloosterman 
sums (J2]) can also be written as 

m 

K m (r, s) = ^2 e m ( rx + sx' 1 ) ■ 

x=l 
gcd(x,m)=l 

As usual, u(k), r{k) and ip(k) denote the number of distinct prime divi- 
sors, the number of positive integer divisors and the Euler function of k ^ 1, 
respectively. 

Finally, /j,(k) denotes the Mobius function. We recall that //(l) = 1, 
n(k) = if k ^ 2 is not squarefree and fx(k) = (— l) w ( fc ) otherwise. 
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2 Number Theory Background 
2.1 Exponential and Character Sums 

We have already mentioned the prominent role of Kloosterman sums ([2]) and 
the bound ([1]) in particular. 

Most of the works also use the identity 

I V e (rV)-/ 1 ' [tv = ° ( modm )' (3) 
e ™{rv)-< if v ^o (modm), {6> 

to express various characteristic functions via exponential sums. Thus, we 
relate various counting questions to exponential sums. 
It is very often complemented by the bound 

w+z 

} j e m (rz) < mm{Z, m/\r\} (4) 

z=W+l 

which holds for any integers r, W and Z ^ 1 with < \r\ ^ m/2, see |115[ 
Bound (8.6)]. 

We now recall the estimate from [I67J of exponential sums with rational 
functions of special type, which generalises the bound ([1]) of Kloosterman 
sums (J2]). 

Lemma 1. Let ni,...,n s be s ^ 2 nonzero fixed pairwise distinct integers. 
Then the bound 



max 

gcd(ai ,...,a s ,m)=d 



e m (aiz ni + ... + a s z % 



2 = 1 

gcd(z,m)=l 



holds. 



We recall that several more bounds of exponential sums with sparse poly- 
nomials of large degree are also given in [301 ESI EH] • 

However, in many cases using bounds of multiplicative character sums 
yields stronger results. 

Let (P m be the set of all ip(m) multiplicative characters modulo m. We 
have the following analogue of ([3]). For any integer r, 

' V y(r) = I 1 if r = 1 ( modm )' (5) 
x v> In otherwise. 1 ; 



Lp(m) ^ otherwise. 
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We also use Xo to denote the principal character. 

The following result is a combination of the Polya- Vinogradov (for v = 1) 
and Burgess (for v ^ 2) bounds, see [115[ Theorems 12.5 and 12.6]. 

Lemma 2. For arbitrary integers W and Z with 1 ^ Z ^ m, the bound 



max 

Xt^XO 



W+Z 



E 



< ^l-l^ m (^+l)/4^ 2 +o(l) 



/ioWs wif/i z/ = 1,2,3 /or an?/ m and with an arbitrary positive integer v if 
m = p is a prime. 

The identity ([5]) immediately implies that for 1 ^ Z ^ m 

2 



E 



E x(*) 



Z=W+1 



y?(m) 1 ^ <^(m)Z 



(6) 



z=W+l 
gcd(2,m)=l 



which has been used in many works on H a , m - 

Furthermore, it turns out, that sometimes one gets better results using 
the following fourth moment estimate from [12] (for prime m = p) and [83] 
(for arbitrary m), see also [96]. In fact, these results have recently been 
generalised in |60j, which we present in the following slightly less precise 
form. 

Lemma 3. For arbitrary integers W, and Z ^ m, the bound 



E 

Xt^XO 



W+Z 

E 

z=W+l 



< m 1+ °^Z 2 



holds. 



Note that many of the results below are based on previous estimates 
of [12] (which require m = p to be prime) and [S3] (which apply to any m 
but require W = 0). So now Lemma [3] allows us to drop these restrictions. 

For example, bounds of higher moments of multiplicative character sums, 
which in particular are based on combining Lemma [2] and a previous version 
of Lemma [3] with some other arguments, have been given [61], and can now 
be generalised. 
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In [H31ISS] a new argument has been introduced to this area, which is based 
on a bound of |113j on the number of large values of Dirichlet polynomials, 
see also the original papers |114[ 1116] as well as [115[ Chapter 9] for some 
other estimates for Dirichlet polynomials. This line of research is extremely 
interesting and definitely deserves more investigation. 



2.2 Average Values of L-functions 



Many quantities related to the distribution of points on T-L a ,m on average 
over a, lead to studying various average values of L-functions L(l,x) with 
multiplicative characters x £ $m, see > f° r example, [1331 1134[ 11351 1136[ I137[ 
11431 1225j . Sometimes such sums are weighted by character sums and are of 
independent interest. 

For example, let R aym (N) be the number of points (x,y) G 7i a , m with 
1 ^ x ^ iV and 1 ^ y < m, and such that x + y is odd. It is shown in [143] , 
that for a prime p the second moment of the differences R atP (N) — N/2, 
a = 1, . . . ,p — 1, can be expressed via the sums 

2 

\L(1,X)\ 2 , 

71=1 



<T,(p,JV) 



E 



x(-i)=-i 



N 



<T2(p, N) 



E *(2) 



x(-i)=-i 



N 



n=l 



Using a combination of the methods of [175[ 1226] , in [143] the asymptotic 
formulas 



cr 2 (p, N) 
are given, where 



apN + O (N 2 p o(1) + p(logiV) 2 ) , 
—pN + O (N 2 p°^ + p(\ogN) 2 ) 



a 



1 + 



16 



E 



E 



l) 2 ^ 2h + 1 

; h=0 



9C(3) ^ (2k 

and £(s) is the Riemann zeta-function. Clearly, the above formulas are non- 
trivial for p £ < N ^ p x ~ e for any fixed s > 0. On the other hand, 

ai(p,p) = (r 2 (p,p) = 0, 
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so there is some kind of the "phase-transition" area when N gets close to p 
which would be interesting to understand more. 



2.3 Theory of Uniform Distribution 

For a finite set J 7 C [0, l] s of the s- dimensional unit cube, we define its 
discrepancy with respect to a domain £ C [0, l] s as 



#{f eT: fe£}_ A(i 



4? 



where A is the Lebesgue measure on [0, l] s . 
We now define the discrepancy of T as 

D{7)= sup A{T, II), 

77C[0,1] S 

where the supremum is taken over all boxes II = [a±, Pi) x . . . x [a s , (3 S ) C 

A link between the discrepancy and exponential sums is provided by 
the celebrated Koksma-Sziisz inequality, see [66, Theorem 1.21]. However, 
for points of "H a ,m, due to the discrete structure of the problem, one can 
immediately establish such a link directly by the identity 

For example, one can consider the points 

(-,-) e [0,l] 2 , (x,y)eUa, m , 

and apply the bound ([1]) to estimate their discrepancy, which in turn is equiv- 
alent to studying points of H a ,m(X, y) where X and y are sets of consecutive 
integers. 

Moreover, the Koksma-Hlawka inequality, see [BUI Theorem 1.14], allows 
us to estimate average values of various functions on the points (x, y) G T-L a ,m- 

Lemma 4. For any continuous function ip(z) on the unit cube [0, 1} S and a 
finite set J 7 C [0, l] s of discrepancy D^), the following bound holds: 



l -Y^m= [ ^(z)dz+o(D(T)) 



where the implied constant depends only on s and the function if). 
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To study % a ,m n W for more general sets W some additional tools are 
required from the theory of uniform distribution. 

As usual, we define the distance between a vector u G [0, 1} S and a set 
~C[0,l] s by 

dist(u, S) = inf_ ||u — w||, 

where ||v|| denotes the Euclidean norm of v. Given e > and a domain 
S C [0, l] s we define the sets 

~+ = { u G [0, 1] S \E : dist(u, S) < e} 

and 

S s - = {ueS : dist(u, [0, 1] S \E) < e} . 

Let h(e) be an arbitrary increasing function defined for e > and such 
that 

lim hie) = 0. 

As in [1281 H 52] . we define the class 5^ of domains 5 C [0, l] s for which 
A (3+) < /»(e) and A (~ £ ~) < 

for any e > 0. 

A relation between D^) and ^(J 7 , H") for E G <S^ is given by the follow- 
ing inequality of [128] (see also [152] ). 

Lemma 5. For any domain E G Sh, we have 

A(F 1 E)<^h(s 1 l 2 D(F) 1 ' s ). 

Finally, the following bound, which is a special case of a more general 
result of H. Weyl [206] shows that if E has a piecewise smooth boundary 
then E E Sh for some linear function h(e) = Ce. 

Lemma 6. For any domain E G [0, l] s with a piecewise smooth boundary, 
we have 

\(3?)=0(e). 

To use the above results for the study of points on T-L a ,mi one usually 
considers points 

^) G [0, l] 2 , (x, y) G n a>m , l^x,y^m. (7) 
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2.4 Arithmetic Functions, Divisors, Prime Numbers 

Certainly some elementary bounds such as 

(p(k) > h 



loglog(A; + 2) 



and 



2"« < r(Jfc) < exp ((log 2 + o(l)) , (8) 

see |189[ Section 1.5.2 and 1.5.4], appear at various stages of the proofs of 
relevant results. 

The following well-known consequence of the sieve of Eratosthenes (essen- 
tially of the inclusion-exclusion principle expressed via the Mobius function) 
is very often needed to estimate the main terms of various asymptotic for- 
mulas (see, for example, [1711 1176] ). 

Lemma 7. For any integers m, Z ^ 1 and W ^ 0, 

w+z , N 

y i = rfriz+o&*^ 



z=W+l 
gcd(2,m)=l 

For an infinite monotonically increasing sequence of positive integers A = 
(a n )™ = i, we define 

H(x, y, z; A) = #{n ^ x : 3 d\a n with y < d ^ z}. 

For A = N, the set of natural numbers, the order of magnitude of H (x, y, z; N) 
for all x,y,z has been determined in [73], see also [106] . Also in [73], one 
can find upper bounds for H(x, y, z; Vb) of the expected order of magnitude, 
where Vb = {p+b : p prime} is a set of so-called shifted primes. However, for 
the problem of studying Ti a ,mi we need analogous results where n is restricted 
to an arithmetic progression. More precisely, let us define the sequences 

Tk = {ink — 1 : m G N} and Uk = {pk — 1 : p prime}. 

It has been shown in [75] that the arguments of [73] imply the following 
estimates. 

It is usual that in questions of this kind, the constant 

1 + log log 2 ^ 

log2 1 ; 

plays an important role, see also [106J. 
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Lemma 8. Uniformly for 100 ^ y ^ x ' 51 , l.ly ^ z ^ y 1A , 1 ^ k ^ logx, 
we /iav e 

H(x,y,z;%) « x-^- M K (log(l/ M ))- 3 / 2 , 
H(x,y,z;Uk) « x-^- M K (log(l/ M ))- 3 / 2 , 

where z = y 1+u . 

A certain result of [75] relies on the existence of infinitely many primes p 
with a prescribed structure of divisors of p — 1, which is done using a very 
deep result of [29] concerning the Bombieri-Vinogradov theorem. 

For an integer k ^ 1 we write 

T(fc) = max —7—, 

i=l,...,r(fc)-l di 

where 1 = d\ < . . . < d T nA = k are the positive divisors of k. 
By |162[ Theorem 1], we have: 

Lemma 9. Uniformly in z ^ t ^ 2, 

> # {k ^ z : T(k) ^ t\ > . 

log z log z 

Finally, we remark, that several interesting results about the distribution 
of points on T-L aim (X, y) on average over a, for some special sets X and y, 
such as intervals 

X = y = {z : 1 z ^ m/2}, 

are based on various asymptotic formulas for average values of Dirichlet L- 
functions, see, for example, [1331 12101 [225]. 



2.5 Integer Points on Algebraic Surfaces and Convex 
Polygons 

The result of [125[ Theorem 2] is based on the following bound on the num- 
ber of solutions to a bivariate quadratic Diophantine equation, which follows 
from [201[ Lemma 3.5] combined with [511 Proposition 1] and [166, Theo- 
rem 1]: 
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Lemma 10. Let 

G{X, Y) = AX 2 + BXY + CY 2 + DX + EY + F G Z[X, Y] 

be an irreducible quadratic polynomial with coefficients of size at most H . 
Assume that G(X, Y) is not affine equivalent to a parabola Y = X 2 and has 
a nonzero determinant 

A = B 2 - AAC ^ 0. 

Then the equation G(x, y) = has at most integral solutions (x, y) G 

[0,H\x[0,H]. 

As usual, we say that a polygon V C M 2 is integral if all its vertices belong 
to the integral lattice Z 2 . 

Also, following [8] we say two polygons V, Q C M? are equivalent if there 
is an affine transformation 

T:x4 Ax. + b, xGl 2 , 

for A = GL2(Z) and b G Z 2 preserving the integral lattice Z 2 (that is, 
det A = ±1) that maps V to Q. 

The following result of [TBI Lemma 3] plays an important role in the 
argument of |125j 

Lemma 11. An integral polygon of area S is equivalent to a polygon con- 
tained in some box [0,u] x [0,v] of area uv ^ 45'. 

Besides, the approach of |125] also makes use a special case of the following 
general result of |153[ Lemma 2.2] which we use only in M 2 . 

Lemma 12. Let il C M. d be a convex compact. We consider a finite sequence 
of compacts QJj C K, i = 1, . . . , n, such that none of them meets the convex 
hull of others. Then 

n 

Y J (vom t f - 1 V (d+ V « (volil)^/^, 

i=l 

where vol 21 denotes the volume of a compact set 21 C l d and the implied 
constant depends only on d. 

Furthermore, a result of [71] (that has been improved in |125j ) uses the 
bound 0(S 1 ^ 3 ) of [7J on the number of integer vertices of a convex polygon 
of area S. 
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3 Distribution of Points on % 



3.1 Points on % a ,m * n Intervals for All a 

A classical conjecture asserts that for any fixed e > and a sufficiently large 
p, for every integer a there are integers x and y with \x\, \y\ ^ p l / 2+£ such that 
xy = a (mod p); see [HI [971 EH [99] and references therein. The question has 
probably been motivated by the following observation. Using the Dirichlet 
pigeon-hole principle, one can easily show that for every integer a there are 
integers x and y with |x|, \y\ ^ p 1 ^ 2 and x/y = a (mod p). 

Unfortunately, this is known only with \x\, \y\ ^ Cp 3 ^ for some absolute 
constant C > 0, which is shown in [92]. Several modifications of this bound, 
for example for composite m, are also known, see |123j . These results are 
based on the bound ([T]) of Kloosterman sums §Z§ (and its more precise form 
in the case when m = p is a prime) combined with some other standard 
arguments. The same arguments also produce the following estimate which 
is a slight generalisation of several previously known results, see [TTJ [88] 
and references therein. This estimate is certainly very well-known and has 
appeared in the literature in various forms. We however give a short proof 
in order to demonstrate the underlying techniques. 

Theorem 13. Let X = {U + 1, . . . , U + X}, where m>X^landU^0 
are arbitrary integers. Suppose that for every x G X we are given a set 
34 = {V x + 1, . . . , V x + Y} where m > Y ^ 1 and V x ^ are arbitrary 
integers. Then for any integer m ^ 1 and a with gcd(a, m) = 1, we have 



(x,y)e'Ha,m 

x&x,yey x 



m? 



Proof. Using ([3]) we write 



m 

(x,y)<=H a , m (x,y)€H a ,m wex zey w r,se 



r,s&/mZ w£X zey w 

We now separate the main term which corresponds to r = s = and is equal 
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For the error term E, for each divisor d\m, we collect together pairs (r, s) 
with the same value gcd(r, s,m) = d. 

Applying the bounds ([[]) and PJ we obtain 

|E| ^ m 1 ' 2 ^ ^ E 1 



(Irl + l)(|s| + 1) 

d\m -(m-l)/2<r,s<m/2 vl 1 /KI 1 ' 

d<m gcd(r,s,m)=c£ 



d|m \Jt|<ro/2<2 1 1 / 

m l/2+o(l)^ c/ -3/2^ m l/2 + o(l) ) 



d<m 

which leads to the desired statement. □ 

For example if V x = V for all x e X = {U + 1, . . . , U + X} and y = 
{V + 1, . . . , V + Y} then Theorem O yields 



<p(m 



#na, m (x, y) = ^xy + o(m l i 2+ °^). (io) 



m 



It seems that improving Theorem [T3] or even just the asymptotic for- 
mula ffTUl) and making them nontrivial for XY < m a with some fixed a < 3/2 
is out of reach at the present time. In particular, this exponent is related to 
the fact that an asymptotic formula for the sum of r(n) for integers n ^ X 
in an arithmetic progression n = a (mod m) is known only for m ^ X 2 ^~ £ 
for an arbitrary fixed e > 0. This result has been independently discovered 
by A. Selberg and C. Hooley (see, for example, the discussion in [HOj ) and 
has resisted any improvement for more than half a century. 

In turn, any improvement of Theorem [13] or just of ({TO]) will trigger a 
chain reaction of improvements in many other problems; in particular some 
of them are outlined in this survey. Probably the most feasible way to tackle 
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this problem is to obtain good bounds of incomplete Kloosterman sums, 
improving the estimate 



(si- 1 ) 



gcd(x,m)=l 



^ I At ^1/2+0(1) 

^ (mgcd(s, m)) 1 y ' 



1 ^ X C m, 



which is immediate from ([T]). We recall that a famous conjecture of Hoo- 
ley [11 lj asserts that if gcd(s, m) = 1 then the bound 



;cd(x,m)=l 



(11) 



holds uniformly over m 1 / 4 ^ X ^ m The conjectured bound ( II ip enables us 
to derive that for X = {1, ... , X} with X ^ m 1 / 4 and 3> = {V+l, . . . , V+Y} 
we have 



-XY + 0(X L/2 m° 



For example, we see that assuming ( fiTi) one can show that for any e and 
sufficiently large prime p, for every integer a there are integers x and y 
with ^ p 2 / 3 + £ anc l suc h that xy = a (modp). Unfortunately, the 

conjecture (TTTT) seems to be extremely difficult; see however |126j for some 
improvements of the bound (TjQ). 

On the other hand, there are some apparently easier questions which 
could be more feasible to answer. 



Question 14. Improve the asymptotic formula ( flOl) for some special moduli 
m, such as primes or prime powers. 

It is quite possible that the method and results of [75] can be use to give 
a positive answer to the next problem; see [H] where the results of [7B] have 
been used to study the distribution of points on H a)m . 



Question 15. Improve the asymptotic formula (ITU]) on average over the 
moduli m < M. 



15 



Clearly, Theorem [T3] can be viewed as the bound O 
discrepancy of the points ([7]). Thus one can now apply Lemmas \5\ and flSJ) to 
study the distribution of points on T-L a ,m in more complicated domains than 
boxes [U + 1, U + X] x [V + 1, V + Y] covered by Theorem [131 For example, 
we immediately deduce that 

#{(x,y)EU a , m : x 2 + y^r 2 } = ^^ + 0(m 3 ^). 

Furthermore, the asymptotic formula ( TlUj) . combined with Lemma HJ pro- 
vides the most direct way to the following asymptotic formula 

Y (x- y) 2v = l - -m 2 <V(m) + O ( m ^+l/2+ (i) \ (12) 

^rL v yj 2z/ + l z/+l v-v ; v ) v ) 

,m 

which has been given in [221j (in a slightly more precise form, which can also 
be obtained within our elementary arguments). 

Similarly Theorem [13] and Lemma H] imply that for any real positive 
A < m/2 

£ 1= A(2m-AMm) +o(ml/2+o(1)) (13) 

(x,y)<=Ha,m 

[x-i/[<A 

which is a version of a result of [222J. 

As we have mentioned, Theorem [13] uses very little specific information 
about the congruence xy = a (mod m) and can be extended to many other 
congruences. For prime m = p one can use the Bombieri bound [28J instead 
of ([T]) and obtain exactly the same results in much more general settings. For 
example, this has been done for solutions of polynomial congruences modulo 
p and also for joint distribution of inverses modulo p of s linear forms cijX+bj, 
j = 1, . . . , s, with integer coefficients, see 05] [53] [55] [56] E7J [58] HQ31 M 
I2T51 12M 12281 1229] and references therein. 

We also remark a very nice and completely elementary result of jH] about 
the distances between inverses on pairs of consecutive integers. 

It is also easy to use some other bounds of more general exponential 
sums (instead of (JTJ) ) to study the distribution of values of polynomials and 
rational functions on the points of T-L a ,m- 

For example, in |212[ 1224] some questions are studied about the distribu- 
tion of residues modulo m of powers (x k , y k ) taken over all (x, y) G Ham- I n 
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particular, it has been shown in |212j . that for any fixed integer k 7^ 0, the 
smallest positive residue modulo m of n h and its modular inverse n k are of 
the same parity 

N(k, m) = O.Bip(m) + O (m 3/4+o(1) ) (14) 

times when n runs through all invertible elements of Z/mZ. 

These results can be substantially extended and improved if one uses 
Lemma [TJ In particular, it has been shown in |174] that Lemma [1] immedi- 
ately implies that the error term can be lowered from m 3 / 44 ^ 1 ) to m 1 / 2 ^ 1 ) 
in (I14p. that is, we have 

N(k, m) = 0.5ip(m) + O (m 1/2+o(1) ) . 

Moreover, it is shown in [174] that an analogous asymptotic formula (with the 
error term m 1 ~ 1 ^ s+ °^) for the counting function of the number of residues 
of s distinct powers x kl , . . . , x k % where ki, . . . ,k s G Z\{0}, of x modulo m 
which belong to s prescribed arithmetic progressions. All these results can be 
obtained by combining Lemma [1] with standard arguments similar to those 
used in the proof of Theorem [13J 

In [4"Tj 1194] one can find asymptotic formulas for the number of points of 
(x, y) G T-L a ,m m more complicated regions of the form 

xe{U + l,...,U + X}, 0<3/</(x), (15) 

where f(t) is a twice differentiable function which satisfies 

F«|/"(t)|«F, te[U+l,U + X), 

for some F ^ 1 (the error term also involves F). It is shown in [4T] that this 
question has applications to sums of divisor function with quadratic polyno- 
mials. Further investigations in this directions would be of great interest. 

3.2 Points on % a ,m i n Intervals on Average Over a 

It is natural to expect that one can get stronger results than Theorem [T3] on 
average over a. 

This indeed is true, and it has been shown in the series of works [HI [97J 
|98| [99] that the congruence a = xy (mod m) is solvable for all but o(m) 
values of a — 1, . . . , m — 1, with x and y significantly smaller than m 3//4 . 
In particular, in [HB], this is proved for x and y in the range 1 ^ x,y ^ 
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mV 2 (logm) 1+e . Certainly this result is very sharp. Indeed, it has been 
noticed in [91] that well-known estimates for integers with a divisor in a 
given interval (see (731 1106] ) immediately imply that for any e > almost all 
residue classes modulo m are not of the form xy (mod m) with 1 ^ x,y ^ 
m 1 / 2 (log m) K ~ £ where k is given by ([9]). 

One can also derive from [75] (which in turn makes use of Lemma ED that 
for any e > the inequality 

max{|x|, \y\ : xy = 1 (mod m)} ^ m 1 / 2 (logm) K / 2 (loglogm) 3 / 4_e 

holds: 

• for all positive integers m ^ M, except for possibly o(M) of them, 

• for all prime m = p ^ M except for possibly o(Mj logM) of them. 
In [71], some ideas and results of [75] have been used to show that 

max{|x|, \y\ : xy = 1 (mod m)} ^ m 1 / 2+ ° ( - 1 - ) 

for all positive integers m ^ M, except for possibly o(M) of them. So this 
implies that the above estimates of [73] are quite tights and also settles a 
slightly relaxed form of one of the conjectures of [75J. 

Similar questions about the ratios x/y, have also been studied, see [91] 
1981 [TM]. 

The result of [98] shows that almost all reduced classes modulo m can be 
represented as xy with 1 ^ x,y ^ m l l 2+£ . However, it does not imply that 
these products are uniformly distributed in reduced residue classes, which is 
sometimes required in applications. 

In this respect, the following bound is a minor modification of a result 
of |171j and gives the desired uniformity of distribution for 1 ^ x ^ X, 
V+l^y^V + Y provided that X, Y ^ m 1/2+e for a fixed e > and 
sufficiently large integer m. In turn, it is based on some ideas from 



Theorem 16. Let X = {1, . . . , X} and y = {V + 1, . . . , V + Y} where 
X, Y ^ 1 and V ^ are arbitrary integers. Then for any integer m ^ 1, 



E 



a=l 
gcd(a,m)=l 



ma, m (x,y)-^xY 2 

m z 



<: X(X + Y)m 



o(l) 
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Proof. We rewrite the congruence xy = a (mod m) as y = ax 1 (mod m) 
(where the inversion is taken modulo m). Using the identity (JH]), we write 



-, X V+Y 

#Ua,m{Xiy) = - EE E e m (r^T 1 - y)) 



k=1 y=V+l -(m-l)/2<r<m/2 
gcd(z,m)=l 



1 x y 

— 2j e m (-rU) 2J e m (arx x ) 2je m (-ry). 



-(m-l)/2<r<m/2 »=1 2/=l 

gcd(x,m)=l 

By Lemma [7J the main term corresponding to r = is 

1 V fi = ^xy + o(y m -^)). 



m — ' — ' 

x=l y=l 
gcd(x,m)=l 



Hence 



#n*, m {x,y) - ^-xy « -\E a<m {x,Y)\ + 

where 

x Y 
E aim (X,Y)= ^ E e m (arx -1 ) ^e m (-ry). 

l<|r|<m/2 »=1 J/=1 
gcd(x,m)=l 

Using the Cauchy inequality (and the extending the summation to all residue 
classes modulo m), we derive 



0=1 

gcd(a,m)=l 



<<4Ei E ^( x > F )i 2 + y2m ~ 1+0(1) 



(16) 



m 

a=l 



We now put J = |_log(y/2)J and define the sets 



777 

TZ = \r : 1 ^ |r| ^ — 



ft, = : e ^<|rK e ^L j = l,...,J, 



y 

f 7-1 m 1 
l y 1 1 y 

ftj+i = {r : e J ^ < |r| < m/2} 
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(we can certainly assume that J ^ 1 since otherwise the bound is trivial). 
Applying the Cauchy inequality again, we deduce 



J+i 



|E a , m (X, Y)\ 2 ^(J + 2)J2 |E«™(*, Y) | s 

j=0 



where 



A' 



E a , m j(X,y) = e m (arx x ) ^e m (-ry). 



re7?.j x=l 

gcd(ir,m)=l 



y=l 



Using (|3J), we conclude that 



for r e 7£j, j = 0, . . . , J + 1. Thus 



E 0jm)i (X,Y)«e^Y 



^ i9 r ^ e m (arx x ) 

gcd(x,m)=l 



j = 0,..., J + l, 



for some complex numbers d T with |i? r | ^ 1 for |r| ^ to/2. Therefore, 



^|E aw (x,r)| 2 « e - 2 ^ 2 ^ 



0=1 



a=l 



gcd(a;,m)=l 



X m 

= e- 2j Y 2 ^ri^ra J^e m (a (r^ 1 -^a^ 1 )) . 

ri,r2£7lj xi,X2^X a=l 

gcd(xia;2,m)=l 

Clearly the inner sum vanishes if r^]" 1 ^ r 2 x^" 1 (mod m) and is equal to m 
otherwise. Therefore 



|E a , mj (X,r)| 2 « e-^Y'mTj, 



(18) 



o=l 



where 3} is the number of solutions to the congruence 

= r 2 Xi (mod to), r 1; r 2 G 7?.j, Xi,x 2 ^ X, gcd(xiX 2 , m) = 1. 
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We now see that if T\ and x 2 are fixed, then r 2 and X\ are such that their 
product s = r 2 Xi <C e^mX/Y belongs to a prescribed residue class modulo 
m. Thus there are at most O {ePX/Y + 1) possible values of s and for each 
fixed s <C e^mX/Y there are r(s) = values of r\ and 22 with s = r\X2, 
see (jSJ). Therefore 

Tj < X#7e, (e^/Y + 1) = + ^ 

and after substitution into (TT5T) we get 

m 

^ |E aw (X, F)| 2 < e-^mT,- = X 2 m 2+0 « + e^XFm 2 ^ 1 ). 

a=l 

Substituting this bound in (|T7|) and recalling (1T6|1 . we conclude the proof. □ 

We note that the proof of Theorem [TBI can easily be extended to arbitrary 
sets X C {1, . . . , X}, see [171] . However, it breaks down if x runs through a 
short interval away from the origin. An alternative approach has been sug- 
gested in [96] and is based on bounds of the fourth moment of multiplicative 
character sums, see Lemma [31 If m — p is prime, it can handle such shifted 
intervals X = {U + 1, . . . , U + X} (but not arbitrary sets X C {1, . . . , X} 
as that of |171j ). Furthermore, the technique of [96j leads to more explicit 
expressions instead of in the error term. Thus, although the approaches 
of [96] and [171] complement each other they still leave some natural open 
questions. 

Question 17. Extend Theorem [76| to sets X = {U + 1, . . . , U + X} with 
arbitrary U . 

As we have mentioned, if m = p, Question[T7]is addressed in [96], however 
some of the necessary ingredients are not known for composite m. 

In [19] the behaviour of H^% a ,m{X ,y) has been studied for the sets X = 
{U + 1,...,U+X} andy = {V + l, V+Y} on average over U and V. It 
is shown in [19] that ^ z 'Ha ! m(X, y) is close to its expected value XY(p(m)/m 2 
for almost all U, V G Z m provided that X, Y ^ m 1//2+e for some fixed e > 0. 
Furthermore, one can also find in [49J a similar statement for a multidimen- 
sional analogues of #7-L a , m (X, y). Several more results of this kind have been 
given in [TTjOj , however in the setting of [100J the initial point of only one 
interval is "sliding" , while the other one is fixed, see also 
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We also note that several results "on average" related to various modifi- 
cations of the Lehmer problem are given in [1331 HEJ USE EES EIB MM MM 
[2251 [227j, see also Section O 

Finally, we remark that #^a,m(^f,3^) has been studied in [54J for the 
same sets as in Theorem [131 that is, for X = {1, . . . ,X} and y = {V + 
1, . . . , V + Y}, but on average over V. It is shown in [M] that in this case 
one can also obtain stronger bounds than that of Theorem [T3J 



3.3 Points on m in Sets with Arithmetic Conditions 

Theorems [TBI and [TBI consider the case when x and y belong to sets of consec- 
utive integers. However, studying points on % a ,m in other sets is of ultimate 
interest as well. 

We start with a very simple observation that no general result of the type 
of Theorems [TBJ and [H] applying to arbitrary sets X and y is possible (even 
for very massive sets X and y). For example, if m = p is a prime and X = y 
consist of all (p— l)/2 quadratic residues modulo p, then 7-L a , P (X, y) — for 
every quadratic nonresidue a. 

The problem of distribution of pairs of primes (p, q) G T-L a ,m has been 
considered in [71] . Unfortunately, it seems that even the Extended Riemann 
Hypothesis is not powerful enough to get a satisfactory answer to this ques- 
tion, see [7T] for details. However, on average over both a and m this problem 
becomes more feasible and has actually been considered in [84J. More pre- 
cisely, let P(X; m, a) be the number of solutions to the congruence 

Pip 2 = a (mod m) 

in primes p\,p% ^ X. It is shown in [M] that for any sufficiently large M, 

E (p(X;m,a)-^Y«X>gX)^ + MX 2 , 

M<m<2M o=l ^ fv 71 ) J 

gcd(a,m)=l 

for any A, with an implied constant that depends on A, and 

£ £ - « (m-'x 4 + mx 2 ) (iogx)- 2 . 

M<p^2M a=l \ V J 

The number S(X; m, a) of solutions to the congruence 

Sis 2 = a (mod m) 
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in squarefree positive integers s 1; s 2 ^ X is certainly easier to study and in 
this case "individual" results are possible. For example, it is shown in [51] 
that for all integers m ^ 1 and a with gcd(a, m) = 1 and real positive x, we 
have 

m, a) = ^ • — ]J ( 1 + 1 - \ + 1 V ' + O . (19) 

p\m 

Moreover, representations of residue classes by products of a squarefree 
number and a prime have also been studied [M] (for a fixed modulus but on 
average over residue classes). 

The result of [HE] on the distribution of values of the Euler function in 
residues classes is based on studying congruences with products of shifted 
primes 

(pi - l)(p 2 - l)(p 3 - 1) = a (mod m) 

and employing bounds of multiplicative character sums with shifted primes 
from |117l 1154] ; see also [EH] for some related results on some residue classes 
modulo m which are "hard" to represent by a totient. 

In [93] an improvement of some results of [86] has been obtained. This 
new idea of [93] is to use a bound of |f 13] on the number of large values of 
Dirichlet polynomials (see also |115[ Chapter 9]), and can probably be applied 
to a number of other questions. For example, one of such applications to the 
distribution of points on multivariate modular hyperbolas is given in [95]. 

It is shown in [M] that there are two absolute constants T], k > such 
that for any prime p and integer X with p > X ^ p 1_r? , if gcd(ak,p) = 1 
then the congruence 

+ k) = a (mod p) 

has (1 + 0(p~ K ))7r(X) 3 jp solutions in primes P\,P2iPz < X (uniformly over 
a and k). It is shown in [95], using a result of [113] . that one can take any 
77 < 13/76. 

In [9l] , for X ^ p, the bound 

« ( X 15/16 +X 2/3 p l/4) p o(l) (2Q) 



max 

gcd(6,p)=l 



q prime 
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has been obtained for exponential sums of reciprocals of primes, which is in 
this special case an improvement of a more general result of [79] . In turn, this 
has led to an improvement of the result of [M] for the number of solutions 
of the congruence 

Pi(p2 + Pz) = a (mod p) (21) 

in primes P\,P2iPs < X. More precisely, in [93] , the asymptotic formula 
(1 + 0(p _K ))7r(X) 3 /p for the number of solutions is shown to hold for p ^ 
X ^ p!6/i7+e^ w here k > depends only on e > 0. Note that the exponent 
16/17 improves the previous exponent 38/39 of [H] that is based on the 
estimate of [79] . Using the bound of [80] on the average values of such 
exponential sums 

< (X 3 / 5 Z 13 / 10 + X^Z 1 ^ 12 ) Z°« (22) 



where X ^ Z, for almost all primes p, one can obtain a similar result for 
p ^ X ^ p!3/i4+£_ ^y" e note that the both bounds ( 120]) and (122]) are nontrivial 
for X ^ p 3 / 4+£ for some fixed e > 0. The bound of [31, Theorem 4.1] is 
nontrivial for X ^ however it is less explicit. Recently, an explicit 

version of the results of [21] has been given in [H] how it is not immediately 
clear whether it can lead to new results about the congruence (J2"lj) (except 
for the case where the variables are in the domain p± ^ X, p2,Ps ^ Y with 
X substantially smaller than Y). 

Furthermore, yet another approximation to the initial problem has been 
considered in |180j . Combining a generalisation of the bound (I2"0"j) to compos- 
ite denominators (given in [SD]) with the sieve method, it is shown in [180J 
that for a sufficiently large m and any a with gcd(a, m) — 1 there is a solution 
to the congruence 

pPu = a (mod m), p, Pi 7 ^ m ' 99 , 

where p is prime and P17 has at most 17 prime divisors. 

One can also study the distribution of points (x,y) G r H at m(X,y) with 
some prescribed structure of prime factors. For example, let P+{k) and 
P-(k) denote the largest and the smallest prime divisors of an integer k ^ 1, 
respectively. 



E 



max 

gcd(6,p)=l 



E ■ 

qs^X 
q prime 
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Question 18. Obtain an asymptotic formula for 



#{(x,y)eH a>m (X,y) : P+(xy) ^ R} 



and 



#{(x,y) eU a , m (X,y) : P-{xy)>r} 



where X — {1, . . . , X} and y — {1, . . . , Y} and 1 ^ X, Y ^ m are arbitrary 
integers with R and r in reasonably large ranges. 

We remark that using elementary sieving arguments one can extend the 
result of Theorem [13] to counting (x,y) G T-L a ,m such that x is of the largest 
possible multiplicative order modulo m (and thus so is y) which is given by 
the Carmichael function \(n). In particular, when m = p is a prime, this 
addresses the problem of distribution of the points (x, y) G "H a ,m where x is 
a primitive root modulo p, for example, see [TFJ 1123] . Proofs of these results 
usually follow the same standard lines as the proof of Theorem [131 except 
that instead of ([T]) one uses the bound of the same strength on Kloosterman 
sums ([2]) twisted with multiplicative characters 



There are still some delicate issues of getting the term as small as 

possible. A certain modification of this question has been studied in [230J. 

We also note that several very interesting results have recently been ob- 
tained in |149] about points (x, y) G T-L a ,m such that x and y have restricted 
g-ary expansions to some fixed base g ^ 2, see also [151j . 

Finally, we note that the dual question about the arithmetic structure 
of the ratio (xy — a)/m for (x, y) G 'K^m is also of interest and may have 
various applications. For example, in |186] such ratios without small prime 
divisors have been studied, which in turn has been important for yet another 
number theoretic question. 

4 Geometric Properties of % a ,m 
4.1 Distances 

We observe that the asymptotic formulas f[T2|) and ffl3|) have a natural inter- 
pretation as the bounds on the power moments and the distribution function 




l/2+o(l) 



(x,y)eH m 
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of the distances between an element x G {1, . . . , m} with gcd(x, m) = 1 and 
its modular inverse. Several results about the average (over a) value of power 
moments of distances can be found in [133] 1134] 1135] 1136] 1137] 1138] , see also 
references therein. 

We now define the width w a ^ m of the set % a ,m'- 

w a:m = max {\x - y\ : (x, y) G T-i a ,m] ■ 

We also put 

for the width of 7-L m , which has been the main object of study of [751 11211 [123] . 
Using Theorem [13] one easily derives that 

w a , m = m + 0(m 3 ^ + °^). (23) 

Using the same arguments as in |123] , one can obtain a more precise expres- 
sion for the factor . 

On the other hand, it has been noticed in |121j that 

m — w m > \2y/m — 1 1 
with equality for all m of the form 

m = k 2 + £k + 1 (24) 
with integers k and I such that k > 0, < £ < 2\/k + 1 and hence 

liminf m ~™ m =2. (25) 

m^oo 

Question 19. Show that there are infinitely many primes m = p of the 
form fl2U) with 0<£< 2^/k + 1. 

As a curiosity, we recall the following, it has been noted in [75], that 
m — w m ^ \/8m for all positive integers m = 2 s with s6Z. Indeed, if s is 
even, then m = (2 s / 2 - l) 2 + 2 (2 s / 2 - 1) + 1 is of the form If s is odd, 
then this follows from 

( 2 (-+l)/2 _ _ 2 (s+l)/2 _ ^ _ 1 ( m()d 2 sy 
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In the opposite direction it is shown in [75J that 



i- rn-w m , 
hmsup -= — = 00. (2oJ 

m— >oa \lTfl 



Furthermore, analogues of ( 1251) and ( 1261) also hold for prime values m = p 

,. ■ rP-w p p-w p 
hmmt = 2 and hmsup = 00, 

p^oo jp jp 

which follow from the following two results given in [75] . 
Theorem 20. For infinitely many primes p, we have 



p-w p ^ 2y/p + 



\ogp 



Proof. Let e = 1/(4 log Q). Using [29] one can show that for sufficiently 
large Q, there is a prime p in the interval ((1 — e)Q,Q] such that p — 1 has 
a divisor d in the interval ((1 — 2e)y/Q, (1 — e)y/Q\. If we write p — 1 = df , 
then w p ^ p — f — d. But, if Q is so large that e 0.01, then 

/+d = ^ + ds _|_ + (1 _ £ )ye <(2+ 3 £ )^, 

which implies the desired result. □ 

Theorem 21. Let f(M) be any positive function tending monotonically to 
zero as M — >• 00. Then the inequality 

m — w m ^ m 1 / 2 (logm) K//2 (loglogm) 3//4 /(m) 

holds: 

• for all positive integers m M , except for possibly o(M) of them, 

• for all primes m = p ^ M except for possibly oiMj logM) of them. 
Proof. Let M be large and set 

z = (logM) K/2 (loglogM) 3/4 /(M/2). 

It suffices to show m — w m ^ zm 1 ^ 2 for o(M) of integers m between M/2 and 
M. Without loss of generality, suppose f(M) ^ 1/ log log M for all M > 10. 
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We define to be the set of positive integers m G (M/2, M] for which 
m — w m ^ ym 1 / 2 and such that there are (x, y) G T-i m with w m = y — x and 
x(m — y) = km — 1. 

By the arithmetic-geometric mean inequality, for every m G J7fc, we have 

w m m -y + x /— f 

= > V x(m - y) = Vkm - 1. (27) 

Thus J k = for fc ^ ^ 2 + 1. Suppose 1 < fc < z 2 + 1, m G (x, y) G ?7 m 
and x{m — y) — km — 1. Then 

^JkM/2 - 1 < max(x, m - y) ^ z\fM. 

By Lemma [H 

A;M(log(3z 2 /A;)) K 



# J- fc *C F(M, y/kM/2=l, z\[M- T k ) < 



¥>(fc) (log M) K (log log M) 3 / 2 
which after simple calculations leads to the estimate 

£ #J4 = o(M) 

l^fc<z 2 +l 

and proves the first part of the theorem. 

The proof of the second part is completely analogous. □ 

The following questions have been formulated as conjectures in [75], where 
one can also find some heuristic arguments in their support. 

Question 22. Let g(M) be any positive function tending monotonically to 
oo as M oo. Show that the inequality 

m — w m ^ m 1 ^ 2 (logm) K//2 (loglogm) 3//4 (y'(m) 

holds: 

• for all positive integers m M , except for possibly o(M) of them, 

• for all primes m = p ^ M except for possibly oiMj logM) of them. 
Question 23. Prove that m — w m ^ m 1 / 2 (logm) K / 2+1 / 2+ °( 1 ) for m — > oo. 
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Even a weaker form of Question [23] with just m}/ 2+ °^ is already of great 
interest and would have some interesting applications, see |124j . 

Besides the extreme and average values of the distances between an el- 
ement and its modular inverse it is also interesting to study the number of 
distinct differences between x and y for (x,y) € % a ,m- 

Question 24. Estimate the cardinality of the sets 

£>a,m = {\x-y\ : {x,y)eH a , m }, 

v tm = {%-y ■ {x,y)en a<m }, 

S a ,m = {x + y : (X,y) eT-L a ,m}- 

It is easy to see that the sets T> a m and m are closely related to each 
other due to symmetry of points on % a ,m- 

Clearly the part of Question [24] concerning T> a ^ m is equivalent to counting 
u — 0, . . . , to — 1 for which the quadratic congruence 

x(x + u) = a (mod m) 

has a solution x with 1 ^ x < m — u. In the case of <S aim one needs to count 
it = 0, ... , ±2(m — 1) for which 

x(u — x) = a (mod m) 

has a solution x with 1 ^ x < u, 

For prime m = p this question has been studied in [182j where an explicit 
formula 

#IV = i(p + l+(j) (i + t-i)^)). 

is given, where (a/p) denotes the Legendre symbol of a modulo p. It has been 
shown in [TD] that the argument of |182j can also be used to derive explicit 
formulas for V^ p and S a>p . However in the case of composite m studying 
these quantities is more complicated and sometimes leads to some surprising 
discoveries. In particular, it is shown in [70] Theorem 16] that for a = 1 we 
have 

1± l^„l^„™ T)± 



#T>f m log log m T^im 
lim inf '— — < oo and lim sup — — - J — > 

m^oo #Ol, m m^oo #Ol m log log TO 



(28) 
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see also [122] . These results also have some interesting combinatorial inter- 
pretation. 

In |182j an analogue of Question [2H concerning T>^ p is also studied when 
x and y range over prescribed intervals, however the method of [182] does 
not immediately apply to the case of composite moduli m. 

A similar question can also be asked about Euclidean distances between 
distinct points of T-L a ,m and also between the origin and points of T-L a ,m- 

Question 25. Estimate the cardinality of the sets 

£ a , m = W fa - x 2 ) 2 + {yi - y 2 ) 2 ■ (jci,2/i), (#2,2/2) e H a ,m} 

and 

The author is grateful to Arne Winterhof for the observation that if m = p 
is a prime then j^T a ^ v can be evaluated explicitely. Indeed if u = x 2 + y 2 
(mod p) for (x,y) G T-L a ,p then the congruence Z 4 — uZ 2 + a 2 = (mod p) 
has exactly four roots x,p — x,y,p — y (in particular, we have two double 
roots if x = y). Since (p — x) 2 + (p — y) 2 ^ x 2 + y 2 we have 




Clearly, Theorem [13] can be used to obtain some lower bounds on j^T> a ,m 
and #<^ a ,m- For example, an easy modification of an argument which leads 
to the bound fl23|) yields 

However we are mostly interested in more precise results which should cer- 
tainly be based on some additional ideas. 

We also ask a question of a different flavour, which is about the number 
of possible directions on the Euclidean plane defined by the pairs of distinct 
points (x 2 ,y 2 ) G U a,m ■ 

Question 26. Estimate the cardinality of the set 

£>a,m = \— — — : (xi,yi), (x 2 ,y 2 ) e H a , m , (^1,2/1)7^(^2,2/2) 

1 2/i - 2/2 
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Obviously Questions [25] and |2H] are influenced by the Erdos and Kakeya 
problems, respectively, see [39, Sections 5.3 and 7.1] and also surveys [3"21112U] 
(we also note the recent remarkable achievement [69] 1105] ). They can also 
be asked for points of T-L a , m (X, y) for various sets X and y. 

We note that in the definitions of the sets £ a ,m, F a ,m and C a ,m all distances 
and angles are computer over the rationals. The same questions can also be 
asked with similar quantities where calculations are performed modulo m. 
Some interesting results in this direction can be found in [701 1107] 1122] . 

Finally, motivated by [21, 22J and some other works one can also ask 
various questions about the distribution of the angles of elevation arctan(?//x) 
of points (x,y) G H a ,m{X ,y) over the horizontal line. 

4.2 Convex Hull 

We consider the convex closure C m of the point set % m . It is not hard to 
see that C m is always a convex polygon with nonempty interior, except when 
m = 2, 3, 4, 6, 8, 12, 24, see [124] . 

Following [124] . we denote by v(m) the number of vertices of C m and by 
V(M) its average value, 

1 - 

m=2 

First of all we notice that by a result of [7J a convex polygon of area S 
may have at most 0(S 1 ^ 3 ) integer vertices, thus we immediately conclude 
that v(m) <C m 2 / 3 . It is shown in [74] that a combination of the bound of [7] 
with Theorem [T3] leads to a stronger estimate: 

v{m) ^ m 7 / 12 +°«. (29) 

Indeed, one can see from Theorem [T3] that all vertices of C m belong to one 
of the rectangles with one side length m and the other side length m 3 ^ 4:+0 ^ 
which are adjacent to one of the sides of the square [0, m — 1] x [0,m — 1]. 
Now considering the intersections of C m with each of these rectangles (which 
remains convex) and applying the the result of [7], we obtain ( 129]) . The 
bound (|2"§]) has recently been improved in [125] as 

v(m) ^ m l / 2+ °^ (30) 
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for any integer m ^ 1 and as 

v(m) ^ m 5 / 12+ °« (31) 

for m which are almost squarefree (in particular, for almost all m). The 
proof of (13 ip is based on some geometric arguments, and thus on Lemmas [TT] 
and [121 an d the bound on the number of solutions to bivariate quadratic 
Diophantine equations in a box given by Lemma [TO] Furthermore, the same 
bounds hold for the convex hulls of arbitrary hyperbolas % a ,m- 

More interestingly, one can obtain another bound, which is much better 
in some cases and relies on more specific properties of T-L m 

v(m) < T{m - l)m o(1) , (32) 

see |124j . where T(k) is defined in Section EU 
The lower bound 

v(m) ^ 2(r(m - 1) - 1) (33) 

is also given in |124j . Furthermore, it is shown in |124] that in fact v(m) = 
2(r(m — 1) — 1) whenever Tim — 1) ^ 5. Thus, this and the bound ( 132]) 
explain why Lemma |9] comes into play. On the other hand, it is shown in [74] 
that v{m) > 2(r(m— 1) — 1) for a set of m of positive asymptotic density. On 
the other hand, improving the previous estimate of [75] . it is shown in [71] 
that [2, Theorem 2.1] can be used to derive that 

t , (p+1)>exp ((^ + 0(1) )_^_). 

for infinitely many primes p. In particular this shows, in a strong form, that 
sometimes v(m) and rim — 1) are vastly different orders of magnitude. 

One can also find in [124] several efficient algorithms for computing v(m), 
together with their complexity analysis. 

Numerical calculations show that while the behaviour of v(m) is not ad- 
equately described by any of the above bounds, the lower bound (13U1) seems 
to be more precise than (f2"9|) and (|3"2~|) . 

It is quite natural to view the points of 7i m as being randomly distributed 
in the square [0, m] x [0, m] (which is supported by the theoretic results which 
we have presented in Sections 13.11 and 13.21) and then appeal to the following 
result of |156[ Satz 1]. Let TZ be a convex polygon in the plane with r vertices 
and let Pj, i — 1, . . . , n, be n points chosen at random in TZ with uniform 
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distribution. Let X n be the number of vertices of the convex closure of the 
points Pi, and let E(X n ) be the expectation of X n . Then 

E{X n ) = jjrQogn + 7) + c n + o(l), (34) 

where 7 = 0.577215 ... is the Euler constant, and c-n depends on 1Z and is 
maximal when TZ is a regular r-gon or is affine equivalent to a regular r-gon. 
In particular, for the unit square TZ = [0, l] 2 we have 

g 

cn = --log 2. 

Using ( 134"1) with r = 4, it seems plausible to conjecture that for most m 

v(m) ~ h(m), 

where 

g 

h(m) = -(log <f(m) + 7 - log 2). 

However, surprisingly enough, the numerical results of |124j show that V(M) 
deviates from 

1 M 8 
H(M) = jj—j J2 Km) = -(logM + 7 + 77 - 1 - log2 + o(l)), 

where 

77 



Elogfl — lip) 
l*L = -0.580058 . . . 
V 

p prime 



quite significantly, and is apparently larger than H(M) by a fixed factor. 
Some partial explanation to this phenomenon has been given in |124] and 
suggests that for each m, the convex hull C m , besides some "random" points, 
also contains a "regular" component with 2(r(m — 1) — 1) points associated 
with divisors of m — 1 whose average contribution 



1 M 

— ^2(r(m-l)-l)~21ogJlf 



m=2 



is of the same order of magnitude as the size of H(M). 
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It is also shown |124] that this affect is specific to the points of % m and 
disappears for the convex hull of points on a "generic" curve which behaves 
in much better agreement with fl34|) than v (m). 

Clearly since (1, 1), (m — 1, m — 1) G T-L m the diameter of T-L m takes the 
largest possible value y/2(m — 2). However for the other values of a the 
question about the diameter of T-L a ,m is more interesting. 

Question 27. Estimate the diameter 

A a _ m = max{ y/(x 1 - x 2 ) 2 + (yi - y 2 ) 2 ■ {xuVi), (^2,2/2) e U a , m }. 

4.3 Visible Points 

For two sets of integers X and y we denote 

G a , m {x,y) = #{(x,y)e'Ha, m (x,y) ■. gc d(x, y ) = i} 

and also, following our usual agreement, we put Q m (X,y) = Qi tm (X, y). 

Clearly Q a ,m(X,y) is the set of points (x, y) G 7-L a ,m(X ,y) which are 
"visible" from the origin (that is, which are not "blocked" by other points 
with integer coordinates). 

The following estimate is obtained in [168J for Q m (X, y) but its extension 
to the general case is immediate and we present it here (in fact we also 
simplify the argument). 

Theorem 28. Let X = {1, ... , X} and y = {1, . . . , Y} where 1 ^ X, Y ^ m 
are arbitrary integers. For all integers m with XY ^ m 3 ^ 2 we have 

y) = - 2 ■ — TT f 1 + - V 1 + o (x 1 /^v2 m -i/4 + o(i )) 

7T 771 \ P J 

where the product is taken over all prime numbers p | m. 
Proof. For an integer z we let 

(z; X ,y) = {(x,y) £ H a ,m{X ,y) : z \ gcd(x, y)}. 

By the inclusion-exclusion principle, we write 

00 

#Gc,m(X,y)=^ll{z)#Ua > m(z\X,y). 

z=l 
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Clearly 

U a , m {z;X,y) = $ 
if gcd(z, m) > 1 or z > m. For gcd(z, m) = 1, writing 

x = zs and y = zt, (35) 

we have 

T-L at m(z; X, y) — {(zs, zt) : st = az~ 2 (mod m), 

1 ^ s < X/z, 1 ^ t ^ r/z}. 

Now, we define 

= [X^V 1 /^- 3 / 4 ] and Q = {X^Y^m^ , 
and note that 

XY/Q 2 ^ m. 
A variant of Theorem [13] gives 

*, y) = + o K^)) , 

which we apply for "small" z ^ R. 

We also note that for each z, the product r = st ^ XY/z 2 , where s and t 
are given by (1351) . belongs to a fixed residue class modulo m and thus can take 
at most XY/z 2 m + l possible values. For each fixed r XY/z 2 XF m 2 , 
there are r(r) = r ^ 1 ) = m°W pairs (s, £) of integers s and £ with r = st, 
see ([!]). Therefore, 

yz^m J 

which we apply for "medium" z with Q ^ z > R. 
We observe that Lemma [TJ yields the bound 

m 

e m {Az~ 2 + Bz) < gcd(A, B, m) 1/2 m 1/2+o(1) . 

2=1 

gcd(,z,m)=l 

Using the same arguments as in the proof of Theorem [T3| we deduce that for 
the number of positive integers z ^ Z with az~ 2 = w (mod m) with some 
w < W is ZW/m + C^m 1 /^ 1 )). 
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We now remark that az 2 = r (mod m) where, as before, 

r = st ^ XY/z 2 < XF/g 2 m. 

Furthermore, for every z the value of r is uniquely defined and leads to at 
most r(r) = possible pairs (s,t). Hence, the total contribution from 

"large" z ^ Q can be estimated as 

[2 log m] 

< V (2- +1 g- ^_ + m vM m °w 

^ V ™^q) 2 ; 

[2 log ml 



v=0 

XY 



^ \2 u mQ I 



Q 



m -l+o(D +m l/2+oM 



Combining the above bounds and recalling our choice of R and Q (which 
optimises the error term), we derive the desired result. □ 

In particular, under the conditions of Theorem [28] 

7Y Z m A A V pi 

p\m 

provided that XY ^ m 3/2+e f or some fixed e > 0. 

It is noticed in [46J that Theorem maybe of use for some Diophantine 
approximation questions, see Section 15.171 

A multidimensional version of Theorem [28] has been derived in |183j . For 
the dimension s = 3 it is based on Theorem [16] For s ^ 4 the proof is 
based on various bounds for multiplicative character sums in the same style 
as in PMH75] . 

Visible points satisfying general polynomial congruences have been stud- 
ied in |181j . However in [181] nontrivial results have been obtained only 
"on average" (either over some families of congruences or over some mod- 
uli) . Recently, a nontrivial result for "individual" congruences has been given 
in 
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Using the technique of [52], together with Theorem I3D1 below, one can 
probably tackle the following problem: 

Question 29. Extend Theorem\2^to intervals of the form 

X = {U + 1,...,U + X} and y = {V + 1, . . . , V + Y} 

with arbitrary U and V. 

We also refer to [145j for further generalisations. 

4.4 Concentration of Points 

For a positive integer Z < p and arbitrary integers U and V, we denote by 
T a>p (Z; U, V) the number of points (x,y) G T-L a ,p which belong to the square 
[U+1,U + Z] x [V + 1,V + Z). 

We remark that Theorem [TBI implies that T atP (Z; U, V) — (1 + o{l))Z 2 /p 
if Z ^ p 3 / 4 + £ f or a fixed e > 0, and also gives a nontrivial upper bound 
T a;P (Z; U, V) = o(Z) if Z ^ p 1 / 2 + e an d ^ = o(p) as p — > oo. These results 
seem to be the limit of what can be achieved within the standard exponential 
sum techniques and currently available estimates on incomplete Kloosterman 
sums. 

However, in [51] improving the previous result of [50J, the following esti- 
mate has been given: 

Theorem 30. There exists some absolute constant rj > such that for any 
positive integer Z < p, uniformly over arbitrary integers U and V, we have 

J Z^+^p- 1 ^ + for any U and V, 

l a>p (Z; U, V) ^ < Z 3/2+o(i) p -i/2 + Z o(i) z f U = y_ 

Several more related estimates are given in [T51 ESI E3 EDI ED EE] • 

4.5 Arithmetic Functions on Points on 7/ aTO 

A modification of the proof of Theorem has lead to the asymptotic for- 
mula f|T9]) . There is little doubt that it can also be extended to the case 
where variables are taken intervals of different lengths and also to the sums 
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under the same conditions on the sets X and y as in Theorem 
For a prime p, asymptotic formulas for the average values 

E £ »K|,- tf |) 

(x,y)en a , p (X,Y) 1 y| (x,»)e«o,p(X,X) 
i^j/ x^y 

are given in [172J. 

It is also interesting to study sums of other arithmetic functions on 

(x, y )en m (x,y). 

Question 31. For intervals 

X = {U + 1,...,U + X} and y = {V + 1, . . . , V + Y} 
of length X,Y $C m, 

• obtain nontrivial bounds for the sums 

Y K x v) and Y \)' 

where (x/y) is the Jacobi symbol of x modulo y, which we also extend 
to even values of y by simply putting (x/y) = in this case; 

• obtain estimates or asymptotic formulas for the sums 

Y T (\ x ~y\) and Y w (\ x -y\)- 

(x,y)eHa,m(X,y) (x,y)&H a<m (X,y) 

We remark that in the case when X and y are very large (compared to 
m) intervals of the form 

X = {X + 1,...,2X} and y = {Y + 1, . . . , 2Y} (36) 

the bound on the sum of Jacobi symbol (x/y) has been given in |213j . In 
fact, the bound of |213] applies to even more general bilinear sums and asserts 
that for any e > 



Y a x (3 y (-) « XY 15 / 16+£ + X 15 / 16+£ F 

U f V TJ'S \y / 



(37) 



(x,y)£Ha,m(X,y) 

xy^Z 
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provided that 

m ^ (min{X, Y}) £/3 , (38) 

where X and y are of the form (I3"6"j) . Z is an arbitrary parameter and the 
sequences a x and (3 y are supported on X and 3^, respectively, and satisfy 

la-d ^ 1, x G X and ^ 1, y G y. 

Since the sum on the left hand side of fl37|) does not exceed XY/m + 
min{X, K } we see that the bound in nontrivial only if 

m ^ (min{X,F}) 1/16 - £ . (39) 

Comparing (138]) and fl39|) we see that fl37|) may only be nontrivial if 

min{X, Y} ^ m 64 . 

Some modifications of the argument of [213] may reduce the exponent 64, 
but certainly not below 16, while in Question EH we ask about much shorter 
sums. 

5 Applications 

5.1 The Lehmer Problem 

One of the most natural and immediate applications of the uniformity of 
distribution results outlined in Section [37T1 is a positive solution to the Lehmer 
problem, see [11)41 Problem F12], about the joint distribution of the parity of 
x and y for (x, y) G 7-La,m(X, y) with some intervals 

X = {U + 1,...,U + X} and y = {V + 1, . . . , V + Y}. 

This distribution is naturally expected to be close to uniform (that is, each 
parity combination is taken about in 25% of the cases) for any odd m ^ 1 and 
sufficiently large X and Y. The Lehmer problem can easily be reformulated 
as a question about the cardinality of j¥H a ,m{.X ,y) for some a and some 
other sets X and y of about X/2 and Y/2 consecutive integers, respectively. 
Indeed, we are interested in solutions to the congruence 

(2x + $i)(2y + $2) = a (mod m) 
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with some fixed i?i,i?2 £ {0, 1} and 

2 2 ' 2 y 2 

It remains to notice that the above congruence is equivalent to 

(x + 2- 1 $ 1 )(y + 2~V 2 ) = 4 _1 a (mod to) 

(where the inversion is taken modulo to), which after a shift of variables takes 
the desired shape. 

Close links between the Lehmer problem and bounds of Kloosterman 
sums (J2J) has been first observed in |218j 1219] . The question and the above ap- 
proach have been extended in several directions, see [5j [56j EO H32[ I133[ I134[ 

and references therein. In particular, in multidimensional generalisations, 
instead of the bound (CQ) more general bounds of incomplete or multiple 
Kloosterman sums 

■ ■ ■ ^2 e ™ ( TlXl 

~t~ • ■ ■ ~t~ ^n%n ~t~ ^(-^l • • • ) ; 

have been frequently used. However, it has turned out that for multivariate 
analogues of the Lehmer problem, and a number of similar questions, bounds 
of character sums provide a more efficient tool than Kloosterman sums (J2]), 
see |176j , where Lemmas |2] and |3] (for prime to = p) and the bound ([6]) have 
been used to improve several previous results. 

Some ternary additive problems with points (x,y) G T-L a ,m satisfying ad- 
ditional divisibility conditions are considered in |142j . The result of |142] 
has been improved in [184J where it is shown that one in fact can deal with 
binary additive problems with such numbers. 

A generalisation of the original problem to joint distribution of arbitrary 
monomials and two arbitrary progressions is given in |174j . which improves 
and generalises some results of [212J. 

Furthermore, a similar problem has also appeared in a very different con- 
text related to cryptography. Indeed, it has been shown in [35] that the 
conjecture of |101j on the cyclical distinctness of so-called ^-sequences mod- 
ulo p can be reformulated as the conjecture that for any prime p and pair of 
integers (a,d) ^ (1, 1) with 

gcd(d,p- 1) = 1, 0<\a\<p/2, \d\ < p/2, 
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except for six explicitly listed triples of (p, a, d), at least one residue modulo 
p of ax d is odd when x runs through all even residues modulo p, that is, that 
ax d = y (mod p) for some 

x E {2,4,..., p- 1} and y E {1, 3, . . . ,p — 2}. 

In |102j this conjecture has been established for a wide class of triples (p, d, a) 
and also for all such triples. Finally, in [35] it has been proved for all triples 
(p,d,a) provided that p is large enough. Clearly d = — 1 is related to the 
Lehmer conjecture. Recently, a decisive progress in a generalised Lehmer 
conjecture has been made in [31]. It is certainly interesting to see how much 
the methods of [311 EH] can be expanded and carried over to other problems. 
For examples, in the most general form one can ask about the existence and 
distribution of solutions to the congruence 

x dl . . . x ds = a (mod p), 1 ^ x\, . . . ,x s < p 

in s arithmetic progressions Xj = b; L (mod ki), i = 1, . . . , s. 

5.2 Distribution of Angles in Some Point Sets 

A version of Theorem [13] has been used in [22] to study the distribution of 
angles between visible points (viewed from the origin) in a dilation of a certain 
plain region Q C [0, l] 2 . More precisely, for Q C [0, l] 2 and a sufficiently large 
Q, we define 

n Q = {(Qa,Q(3) : (a, 0) E O)}. 

We now consider =ffJ-n(Q) angles between the horizontal line and the points 
of the set 

Fn{Q) = {{x,y)En Q r\Z 2 : gcd(a;,y) = l}. 

The distribution of these angles is studied in [22] and shown to exhibit a 
somewhat unexpected behaviour. 

A slight generalisation of Theorem [13] has also played an important role in 
the study of angles defined by some other point sets [21], see also [25 | l26 ] [196j. 

5.3 Distribution of the Trajectory Length in the Peri- 
odic Lorentz Gas 

Links between Theorem [13] and some problems of mathematical physics can 
be found in [211 [23 SSI SI]- Namely, assume that a particle moves along a 
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straight line in a <i-dimensional lattice until it falls in a (^-neighbourhood of 
a lattice point. In [2U [27J H2J SI] the distribution of the trajectory length is 
studied. 



5.4 Vertices of Convex Lattice Polygons 

Let N(r) be the number of vertices of the convex hull of the set of the integral 
lattice points inside of the ball of radius R centered at the origin, that is, of 
the set {(x, y) el 2 : x 2 + y 2 < r 2 }. It is shown in [13] that for 1 < H < R 



A version of Theorem [131 is one of the crucial ingredients of the proof. 

5.5 Arithmetic Structure of Shifted Products 

The main result of [186] on the largest prime divisor of the shifted products 
ab + 1, when a and b run through some reasonably dense sets of integers of 
a sufficiently large interval [1 , N] , is based on a variant of Theorem [131 The 
result of [186] has recently been improved in [147] . where it is also shown 
that the above problem is related to counting #H p (X, y) on average over 
primes p for arbitrary sets of integers X, y C Z. 

Furthermore, in |13Uj . Theorem [TBI and its generalisations given in [169, 
176J (that are based on bounds on multiplicative character sums) have been 
used to study kth powerfree values of the polynomial Xx...X r — 1, see also [81] 
for some other related results and alternative approaches to problems of this 
type. 

5.6 Sums of Divisor Functions over Quadratic Polyno- 
mials and Arithmetic Progressions 

It has been demonstrated in [JT] that results about the distribution of points 
(x, y) e 'H a ,m m the regions of the form f[T5|) can be used to derive precise 
asymptotic formulas for sums of the divisors with quadratic polynomials; for 
example, for the sums 



we have 




S D (N) = Y,r(n 2 + D) 
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where D ^ 1 is a squarefree integer. 

Furthermore, the strength of estimates on the error terms in asymptotic 
formulas for sums of some divisor functions over an arithmetic progression 



n=a (mod m) 



is closely related to the precision of our knowledge of #H a ,m(X, y), where X 
and y are sets of consecutive integers and also multidimensional analogues 
of this question, see [151 E3 |82j [831 I108j 1190] . This link becomes transparent 
if one recalls that a standard approach to evaluating divisor sums is approx- 
imating the hyperbolic region {(x, y) : x, y ^ 0, xy ^ N} by a union of 
"small" rectangles. In fact, as we have mentioned, the proof of Theorem [T6l 
is based on some ideas of [15], where an asymptotic formula is given for the 
sums S a)m (N) "on average" over a. In |190] . there are also several results, 
and conjectures, for similar average values of various restricted versions of 
the divisor functions 7"(n), but with less averaging. These results are also 
related to the problem of Section 15.71 

5.7 Pair Correlation of Fractional Parts of an 2 

It is known, see |146[ 1160] , that the spacings between the fractional parts of 
the sequence an 2 , n = 1, 2, . . ., obey a Poisson distribution for almost all real 
a. However no specific example of such a is known. However |109j Theo- 
rem 2] comes very close to giving such an example. Its proof, amongst other 
technical tools, is also based on tight upper bounds for the divisor function 
over short arithmetic progressions, which in turn leads to studying points on 
modular hyperbolas. In particular, we note that [1091 Conjecture 2], can be 
reformulated as the upper bound 



Besides, it is shown in [109] that one of the approaches to the distribution of 
spacings between the fractional parts of an 2 is via studying the number of 
solutions of the quadratic congruence 



for the sets X = y = {1 




x 2 — y 2 = c (mod q), 



l^x^X, l^y < y, 
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on average over c that runs through the reduced residue classes modulo q. 
Furthermore, one can find such a bound in [109[ Lemma 3]. It is shown 
in |179j that a slight generalisation of Theorem [16] leads to an improvement 
of [1091 Lemma 3] for some parameter ranges. However, unfortunately in 
the range relevant to the pair correlation problem the corresponding results 
of |lU9j and [179] are essentially of the same strength. 

Similar links between the distribution of fractional parts of an 2 , behaviour 
of the divisor function in arithmetic progressions and distribution of points 
on modular hyperbolas have also been exhibited in [190] . It is shown in |178] 
that Theorem [16] can be used to derive improvements on some of the results 

of USD]. 

5.8 The Sato-Tate Conjecture in the "Vertical" As- 
pect 

We also recall that Theorem [TH] about the distribution of points on T-L a ,m on 
average over a has been used in studying the so-called "vertical" aspect of 
the Sato-Tate conjecture for Kloosterman sums (j2J), see |171j . The relation is 
provided by the identity K m {r, s) = K m (l,rs) which holds if gcd(r, m) = 1. 
Clearly for the complex conjugated sum we have 

K m (r, s) = K m (-r, -s) = K m (r, s), 

hence we see that K m (r,s) is real. Since by the Weil bound, for any prime 
p, we have 

\K p (r, s)| < 2y/p, gcd(r, s,p) = 1, 

see |115[ Theorem 11.11], we can now define the angles ip p (r,s) by the rela- 
tions 

K p (r, s) = 2 y/p cos ip p {r, s) and ^ ipp(r, s) ^ n. 

The famous Sato-Tate conjecture asserts that, in the "horizontal" as- 
pect, that is, for any fixed non-zero integers r and s, the angles ip p (r, s) are 
distributed according to the Sato-Tate density 

fisr(a,(3) = - sin 2 7c?7, 
J a 

see |115[ Section 21.2]. More precisely, if n rtS (a, (3;T) denotes the number of 
primes p ^ T with a ^ ip p (r, s) ^ (3, the Sato-Tate conjecture predicts that 

7r riS (a,/3;T) ~ /j, ST (a, (3)ir(T), T — >• oo, (40) 
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for all fixed real ^ a < (3 ^ n, where, as usual, vr(T) denotes the total 
number of primes p ^ T, see |115[ Section 21.2]. We remark that for elliptic 
curves, the Sato-Tate conjecture in its original (and the most difficult) "hor- 
izontal" aspect has recently been settled [188J, but it still remains open for 
Kloosterman sums fl2]) . It is shown in |171] that Theorem [16] implies that 

0<|r|^_R0<|s|sSS 

provided RS ^ T 1+£ for some fixed e > 0. 



5.9 Farey Fractions and Quotients of the Dedekind 
Eta-function 

A result on the average values of some bivariate functions taken over points 
of 7-L a ,m, has been obtained in [23J as a tool in the study of the distribution 
of Farey fractions 

jr(T) = {r/s e Q : gcd(r, s) = 1, 1 < r < s ^ T}. (41) 

The proof of this result is based on some bounds of incomplete Kloosterman 
sums and is based on the same ideas which have led to Theorem [131 

It has also been used j6] to study the distribution of the quotients of the 
Dedekind Eta-function rj(z). 

5.10 Farey Fractions in Residue Classes and the Lang- 
Trotter Conjecture on Average 

The same arguments used in the prove of Theorem [161 can be used to study 
the distribution of ratios x/y, x £ X, y E y, in residue classes, where X 
and y are sets of the same type as in Theorem [161 Combining this with an 
elementary sieve, it has been shown in [63] that the set of slightly modified 
Farey fractions of order T, that is, the set 

G(T) = {r/s E Q : gcd(r, s) = 1, 1 ^ r, s ^ T}, 

is uniformly distributed in residue classes modulo a prime p provided T ^ 
p l / 2+£ for any fixed e > 0. 
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In turn, this result has been used in [53] to improve upper bounds of [52] 
for the Lang-Trotter conjectures on Frobenius traces and Frobenius fields 
"on average" over a one-parametric family of elliptic curves 

E A>B (t): U 2 = V 3 + A(t)V + B(t) 

with some polynomials A(t), B(t) e Z[t] when the variable t is specialised to 
the elements of Q(T). A similar result can also be obtained for the set F{T) 
of "proper" Farey fractions given by (|4ip . 

5.11 Torsion of Elliptic Curves 

A variant of Theorem [TBI has been obtained in [148] and applied to estimating 
torsion of elliptic curves. More precisely, let £ be an elliptic curve over an 
algebraic number field K of degree d over Q. It is shown in [148] that if £ 
contains a point of prime order p then 

p^d 3d \ 

5.12 Ranks and Selmer Groups of Elliptic Curves 

In [213] the bound (1371) is used to show that for any elliptic curve £ of the 
form 

£: Y 2 = X(X 2 + aX + b) 

where a and b are integers satisfying a certain special relation, the sequence 
of its quadratic twists 

£ D : BY 2 = X(X 2 + aX + b) 

is of rank for a positive proportion of squarefree integers D. We also note 
that the bound (1371) plays an important role in studying the distribution of 
Selmer groups of similar families of curves, see [208] . 

5.13 Manin Conjecture for Some del Pezzo Surfaces 

Theorem [TBI has also been obtained in [1291 Lemma 1] where is used a tool to 
derive an asymptotic formula for rational points of bounded height on some 
del Pezzo surfaces. A 3-dimensional version of Theorem [TBI from [82] has been 
used in [131] for a similar purpose. These asymptotic formulas correspond 
to the Manin conjecture for these type of varieties. 
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5.14 Frobenius Numbers 

Given a vector a = (ax, . . . , a s ) of s positive integers with gcd(ai, . . . , a s ) = 1 
we define its Frobenius Number F (a) as the smallest integer fo such that 
any integer f > fo can be represented as 

/ = a x xi + . . . + a s x s 

with nonnegative integers x%, . . . , x s , see |155j for the background. 

It has been demonstrated in \WS\ \18b\ 1195] that for the case s = 3 results 
of the type of Theorem [TBI become important in studying the distribution of 
the values of F (a). 

We remark that in the case of s = 3 it has been conjectured in [18] that 

F((a,b,c)) ^ (abc) 5/8 (42) 

for all vectors (a, b, c) except for some explicitly excluded family of vectors; 
see also [HI Conjecture 1] for an even stronger conjecture. However the 
conjectured inequality ( l4"2"j) has been disproved in [163J, where it is shown that 
for any a there are (p(a)/2 pairs (6, c) with a < b < c < 2a and gcd(a, b, c) = 1 
for which 2 

F{(a,b,c))>j. 

Since abc ^ 4a 3 , this means that the exponent in 5/8 in ( I42p has to be 
increased up to at least 2/3. Since these vectors are admissible in the termi- 
nology of [18] it shows that [181 Conjecture 1] fails too. 

However one can do even better by using Theorem [T3] and taking any pair 
(6, c) with be = 1 (mod a) and 6, c = a 3 ^ + °^ in the argument of the proof 
of |163[ Theorem 1], getting 

F((a,b,c)) ^a 7/4+o(1) 

for such vectors (a,b,c). Thus, since abc = 

a 5/2+o(l) ) we 

conclude that for 

any a there are many pairs (b,c) for which 5/8 in the conjecture ( 1421) has 
to be increased up to 7/10. Clearly these examples are quite sporadic and 
certainly do not belong to the family of excluded triples from |18] . We also 
remark that the family of integral vectors of the form 

(a,&,c) = (d/-l,d,/), d^f^d l+ °^\ 
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as d — > oo, for which abc = a 2+ °^ leads to the inequality 

F((a,b,c)) > a6 1+o(1) = (afec) 3/4+o(1) . 

Furthermore, using lower bounds on H(x, y, z; N), see [73 | 1106] one can see 
that the sequence of a = df — 1 of the above form is quite dense. 

In the opposite direction, it is shown in [199j that for any a and almost 
all pairs of positive integers (6, c) with max{6, c} ^ a we have 

F((a,b,c)) < (a6c) 1/2 . 

Several other recent results can be found in [21 IH EH EH 1187] . 

5.15 Distribution of Solutions of Linear Equations 

The paper [64J has introduced the question on the distribution of ratios 
x/m associated with the smallest positive solutions (x,y) to linear equations 
kx — my = 1, on average over the coefficients k and m in some intervals. 
In [M] it has been studied via continued fractions, see also [SS]. Then, it has 
been noticed in [HH 1157] that results of the type of Theorem [T5] provide a 
simpler and more direct way to investigate the above ratios. Indeed, it is easy 
to see that this is equivalent to studying the distribution of modular inverses 
k~ l (mod m) which explains the link with Theorem [13] and of course, with 
Kloosterman sums (T5]). However this argument does not take any advantage 
of averaging over m. It is very plausible that the results about sums of 
Kloosterman sums, which date back to [127] can be useful for this kind of 
problem. 

Question 32. Improve the error terms in the asymptotic formulas of [fify Wh\ 
\8l\ \157$ by using the results of on cancellations in sums of Kloosterman 
sums, see also lllb] Chapter 16] for the guide to the modern results. 

In |177j , using some bounds of certain bilinear exponential sums from [67J , 
these results have been extended to the case when the coefficients k and m 
run through arbitrary but sufficiently dense sets of integers. 

5.16 Coefficients of Cyclotomic Polynomials 

Let 

A(n) = max |a n (A;)| 

k=Q...,ip(n) 
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be the height of the nth cyclotomic polynomial: 

ip(n) 

In [90] , Theorem [13] has been used to show that for any e > and any 
sufficiently large prime p there exist infinitely many pairs (q, r) of distinct 
primes such that 

'2 



A(pqr) ^ f - - ej p, 
which disproves a conjecture from [T9] . 

5.17 Approximations by Sums of Several Rationals 

Following jl6l 07], we consider the problem of obtaining an upper bound on 
the approximation of a real a by s rational fractions with denominators at 
most Q, that is for 



i(Q) = min 

l^<?i,...,ij a ^Q 



with positive integers qi,...,q s ^ Q. The question is motivated by the 
Dirichlet theorem on rational approximations which corresponds to the case 
s = 1. 

It is shown in H7] that the results on the distribution of points on 
T-L a ,m and its multivariate analogues are directly related to this question and 
imply nontrivial bounds on 5 a ^ s (Q). 

In particular, it is remarked in [35] that for s = 2 the question of Sec- 
tion 14.31 on visible points on modular hyperbolas becomes relevant and the 
result of |168] implies [Ml Conjecture 5] with any $ > 3/4. 

Furthermore, it is shown in |173j that in some cases, using Theorem [161 
one can improve some of the results of 



5.18 SL 2 (F p ) Matrices of Bounded Height 

For a finite field ¥ p of p elements and a positive integer T ^ (p — l)/2, we 
use N p (T) to denote the number of matrices 



u v 
x y 



E SL 2 (F 
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with |w|,|t>|,|x|,|?/| ^ T (we assume that ¥ p is represented by the elements 
of the set {0, ±1, . . . , ±(p - l)/2}). 
Clearly 

N P (T) = #H>a+l#(T, T)#H a ,p{T, T) 

where T = {0, ±1, . . . , ±T} and also #H , P (T, T) = 4T + 1. 
It has been shown in pQ that using the identity 

Y j m a AT,T) = (2T+l) 2 

a€F p 

and Theorem [161 one can derive that 

N P (T) = (2T + 1)4 + O (TV^)) , 
p / 

which is nontrivial if T ^ pV 2 +£ f or an y fixed £ > and sufficiently large 
p. More general results on the distribution of determinants of n-dimensional 
matrices with entries from an arbitrary (but sufficiently large) set A C ¥ p 
are given in |202j . see also |203j . We remark that these are F p analogues of 
the results of similar spirit for matrices over Z and algebraic number fields, 
sec [68 , 158J and references therein. Furthermore, if one is only interested in 
the existence of SL 2 (F p ) matrices with bounded entries then one can apply 
the results from [11] about the existence of solutions to congruences 

axv + byu = c (mod m) 

in prescribed intervals. 



5.19 Matrix Products and Continued Fractions 



A variant of Theorem [131 plays an important role in obtaining an asymptotic 
formula for the number of products of the matrices 



1 1 
1 



and 



1 

1 1 



which are of trace at most N, see [20]. In turn, this question is related to 
studying the number of reduced quadratic irrationalities whose continued 
fraction expansions are of period length at most L. 
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Theorem [TS] has also been used in |191j to estimate a certain weighted 
sum over points of 7-L m which appears in studying statistical properties of 
continued fractions of rational numbers from a certain set such as a/6 with 
a, b ^ 1 and a 2 + b 2 < R, see also IH [1921 [1931 (Ml HE] for other versions 
and applications of Theorem [13j 

In |15U] , one can find several results about rational fractions a/m with 
partial quotients bounded by a certain parameter k. The approach of |150] 
rests on a series of very interesting results about the distribution of points of 

5.20 Computing Discrete Logarithms and Factoring 

It has been discovered in |165] that the distribution of points on hyperbolas 
"H a ,m has direct links with analysis of some discrete logarithm algorithms. 
Namely, analysis of the algorithm from j!65] rests on a weaker version of 
Theorem [TH] obtained in |164] . 

Question 33. Study whether Theorem Q2I can be used to improve some of 
the results of 1165^ . 

A new deterministic integer factorisation algorithm has recently been sug- 
gested in |159] . Its analysis depends on a variant of Theorem [T3j 

6 Concluding Remarks 

6.1 Multivariate Gerneralisations 

Multidimensional variants of the above problems have also been consid- 
ered and in principle one can use bounds of multidimensional Kloosterman 
sums (J2|) to study the distribution of solutions to the congruence 

X\ . . . x s = a (mod m) (43) 

in the same fashion as in the case of two variables. However, it has been 
shown in [10] that in many cases bounds of multiplicative character sums 
lead to much stronger results. For example, in |176] , using the bounds of 
Lemma [21 a previous less general version of Lemma [3] and the bound ([6]) , 
an improvement is given of some results of [5J on the generalised Lehmer 
problem, see also [214J. Similar ideas have also led in [169] to some other 
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results on distribution of solutions to 
the discrepancy of the s- dimensional points 



. For instance, let A sam denote 



m ' ' m 



G [0, 1] S , 
It is shown in |169j that 

A 



xi . . . x s = a (mod m), 1 ^ x\, . . . , x s ^ m. 



s,a,m 



m -l/2+ (l) ifs = 3) 

m -i+o(i) if s > 4. 



As we have mentioned, a multidimensional analogue of Theorem [28] is given 
in [183] . Using Lemma [3] in its present form one can easily generalise the 
above results. 

We now show how multiplicative characters can be used on the example 
of counting the number of solutions to the congruence 



xi . . . x s = a (mod m) 



1 ^ Xi ^ Xi, i = 1 . . . , s, 



for some integers X 1; . . . , X s ^ 1, which we denote as N s (a, m; X 1; . . . , X s 
Assuming that gcd(a, m) = 1 and using the identity (jSJ), we write 



N 3 (a,m;X u ...,X S 



OC \ • • • s ^ 



£1=1 X a = l 



Changing the order of summation and separating the contribution from the 
principal character xo, which gives the main term X\ . . . X s /ip(m), we obtain 



N s (a,m;Xi, ...,X S 



A 1 ... A s 



ip(m) 



1 

^ (p(m) ^ n 

Xt^XO 



Si=i 



We now assume that s ^ 4. Then we apply Lemma [2] to s — 4 sums in the 
above (say for i = 5, . . . , s) and then use the Holder inequality. This leads 
to the estimate 



N s (a,m;X h ...,X S 



Xi . . . X s 



ip{m) 



(p(m) 



-m 



(s-4)(H-l)/4i> 2 +o( 



8=5 



i=l 



/ 

£ 

\Xt^X0 



X4 = l 



v 1/4 
4 \ 
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We now apply Lemma |5] to the product of 4th powers. Certainly depending 
on the relative sizes of X\, . . . , X s , Lemma |2] can give better results if applied 
to different sums and maybe with different values of v for each sum. 

In J95J ES] the above approach based on using multiplicative character 
sums instead of exponential sums has been complemented with a very inter- 
esting new ingredient, which is based on the results and ideas of jE5J 1113] . 
In particular, it is shown in [95J that 

N 3 (a,m;X 1 ,X 2 ,X 3 )>0 

and if m is cubefree then aslo 

N^a,m;X 1 ,X 2 ,X 3 ,X 4 ) > 

for all but o{m) residue classes modulo m, provided that XiX 2 X 3 > m 1+£ 
and X1X2X3X4 > m 1+£ , respectively, for some fixed e > 0. This line of 
research is very new and promising. 

We, however, note that even in the multidimensional case, multiplicative 
character sum techniques do not always win over the exponential sum ap- 
proach. For example, it seems that for the results of [19] the bound on Kloost- 
erman sums fl2]) gives a more powerful and appropriate tool than bounds of 
multiplicative character sums. 

Upper bounds on the number of solutions of the congruence (j4"3|) with 
variables from short intervals are given in [5B1 EI]- F° r example, it is shown 
in [55] that for a prime m = p and a positive integer 

h < p 1 ^ 2 -^ 

there are at most solutions in interval of length h, that is with Xj G 

[ki + h], for some integers k i: i = 1, . . . , s, see also [57] . 

It is worth noticing that one has to be careful with posing multidimen- 
sional generalisations, which sometimes lead to rather simple questions for 
s ^ 3 (despite that for s = 2 they are nontrivial at all). For example, it has 
been noticed in [169] that often such generalisations do not need any ana- 
lytic technique used in [217] but follow immediately from a very elementary 
argument. 
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6.2 Gerneralisations to Other Congruences and Alge- 
braic Domains 

We believe that it is interesting to explore how much of the theory developed 
for modular hyperbolas can be extended to modular circles 

C a>m = {{x,y) : x 2 + y 2 = a (mod m)}. 

Well-known parallels between the properties of integer points on hyperbolas 
and circles on the Euclidean plane, suggest that many of the results obtained 
for % a ,m can be extended to C a , m - We also recall that |109[ Lemma 3] gives 
a version of Theorem [16] for the number of solutions to the congruence 

x 2 — y 2 = a (mod m), 1 ^ x, y ^ X, 

on average over a. 

One can also consider the analogue of the question of Section 15.181 for 
higher dimensional matrices. For example, for it is shown in [T] that for 
T ^ p 3 / 4 + £ the number of matrices 

( Xij )l j=1 G SL 2 (F p ) 

with \xij\ ^ T, i,j — 1, . . . ,n, is asymptotic to its expected value T™ 2 /p. This 
result is based on different arguments which rely on the results of [TTJ [75] 
(and in fact apply to a wide class of polynomial equations). 

Question 34. Close the gap between the thresholds T ^ p l / 2+£ for n = 2 
and T ^ p 3 / 4+e for n ^ 3 . 

In [112] , using bounds of [72] for exponential sums with matrices, the join 
distribution of elements of a matrix A e GL n (F p ) and its inverse A~ l has 
been studied. In particular, in |112j some analogues of the result of [T7] have 
been derived. 

One of the interesting and still unexplored lines of research is studying 
function field generalisations, which conceivably should admit results of the 
same strength or maybe even stronger as in the case of residue rings. For 
example, a polynomial analogue of the conjecture of [7TJ could be more ac- 
cessible. 
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Question 35. Let ¥ q be a finite field of q elements. Given an irreducible 
polynomial F(X) G F 9 [X] of sufficiently large degree d, show that for any 
polynomial A(X) G F 9 [X], relatively prime to F(X), there are two irreducible 
polynomials G(X), H(X) G F g [X] of degree at most d such that 

G{X)H{X) = A{X) (mod F{X)). 

It is also natural to ask about possible generalisations of Theorems [13] 
and dn] to matrix equations. 

Question 36. Obtain asymptotic formulas, individually for every nxn ma- 
trix A over Z/mZ and also on average over all such matrices, for the number 
of solutions of the congruence 

XY = A (mod m) 

with matrices X = (xij)™- =1 and Y = (yij)^j =1 where G X^, G for 
some "interesting" sets X^^y^ C Z/mZ, i,j = 1, . . . ,n (for example, when 
elements belong to prescribed short intervals). 

6.3 Ratios Instead of Products 

Questions about the distribution of points on modular hyperbolas can be 
reformulated as questions about the distribution of products xy in residue 
classes modulo m. In turn this naturally leads to similar questions about the 
distribution of ratios x/y (with gcd(y,m) = 1) in residue classes. Although 
typographically similar, many aspects of these new questions are very differ- 
ent. 

For example, we have already mentioned in Section [331 that for any prime 
p, any integer a can easily be shown to be represented as x/y = a (mod p) for 
some integers x and y with \x\, \y\ ^ p 1 ^ 2 , while for the products this state- 
ment is not correct and even obtaining a relaxed statements with \x\, \y\ ^ p 1 
for some 7 < 3/4 is still an open problem (and apparently is very hard). 

Furthermore, by Theorem [131 every integer a can be represented in the 
form xy = a (mod p) for some integers x and y with 1 ^ x, y ^ p 3 / 4+e for any 
e and sufficiently large p, while obviously the congruence x/y = —1 (mod p) 
has no solution with 1 ^ x,y ^ p/2. 

On the other hand, in |171] , a full analogue of Theorem [16] is given for 
the ratios x/y as well, see also [633 EH EH H64j and Section 15.101 

Further investigation of distinctions and similarities between these two 
groups of questions is a very interesting direction of research. 
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6.4 Further Perspectives 



Here we mention some results which have not been used in this area, which 
we believe can lead to some new directions of research. 

We have seen that bounds of Kloosterman sums (T5]) and several other 
celebrated number theoretic results and techniques, play a prominent role in 
this field. Still, it is highly important to further extend the scope of number 
theoretic tools which can be used for studying the points on modular hyper- 
bolas and their generalisations. In particular, it would be very interesting to 
find new applications of the bounds of very short incomplete Kloosterman 
sums from J2H ESI EES (M E2 EDI 1203] • 

Furthermore, one may expect that the bounds of bilinear sum 

^2 «m^e m (ax _1 ), a E Z, 

from [HZ] (where (a m ) and ($ x ) are arbitrary sequences supported on the 
intervals [M, 2M] and [X, 2X] , respectively) can be useful for studying the 
points on TL a ,m i n very general sets on average over moduli m taken from 
another general set. One of such applications has been mentioned in Sec- 
tion sua 

In the same spirit, finding applications of the bounds of sums of Kloost- 
erman sums (j2J) to the study of points on 'K a ,m would be of great interest, 
see |115| Chapter 16] for a background on such results. 
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